Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 06:16:41 +0000 CVE-2024-2756 — __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix https://vulnerability.circl.lu/vuln/cve-2024-2756 <p><strong>Affected:</strong> PHP Group PHP, php archive_tar</p> <p>Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim&#39;s browser which is treated as a __Host- or __Secure- cookie by PHP applications.</p> <p><strong>Affected:</strong> PHP Group PHP, php archive_tar</p> <p>Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim&#39;s browser which is treated as a __Host- or __Secure- cookie by PHP applications.</p> https://vulnerability.circl.lu/vuln/cve-2024-2756